voronind/nix
0
0
Fork 0
Code Issues 39 Pull requests Packages Projects Releases Wiki Activity

Pass: Fix fucking SYSTEMD HARDENING.

Browse source
This commit is contained in:
Dmitry Voronin 2024-11-15 08:17:34 +03:00
parent 43283722d1
commit db5954ff84
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
container/Pass.nix
View file

@ -33,7 +33,7 @@ in {
containers.pass = container.mkContainer cfg { containers.pass = container.mkContainer cfg {
bindMounts = { bindMounts = {
"/var/lib/bitwarden_rs" = { "/var/lib/vaultwarden" = {
hostPath = "${cfg.storage}/data"; hostPath = "${cfg.storage}/data";
isReadOnly = false; isReadOnly = false;
}; };
@ -43,9 +43,9 @@ in {
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
dbBackend = "sqlite"; dbBackend = "sqlite";
environmentFile = "/var/lib/bitwarden_rs/Env"; environmentFile = "/var/lib/vaultwarden/Env";
config = { config = {
DATA_FOLDER = "/var/lib/bitwarden_rs"; DATA_FOLDER = "/var/lib/vaultwarden";
DOMAIN = "http://${cfg.domain}"; DOMAIN = "http://${cfg.domain}";
ROCKET_ADDRESS = cfg.address; ROCKET_ADDRESS = cfg.address;
ROCKET_PORT = cfg.port; ROCKET_PORT = cfg.port;